ON BREAKING SAML: BE WHOEVER YOU WANT TO BE, http://www.nds.rub.de/research/publications/BreakingSAML/